The script runs interactively against a host the operator has already
connected to, so pinning the option added nothing. Removing the override
lets ssh use its default (ask): it consults the user's own known_hosts
and prompts once on first connect, and still refuses a changed host key
afterwards.
Left as-is in CI, which has no prompt and pins the key via the
SSH_KNOWN_HOSTS secret.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
luxick
2fcb2fd219